Privacy Policy

Yen Finder keeps the information it collects to the absolute minimum so that inbound tourists visiting Japan can use it with peace of mind. This page sets out exactly which data we handle and how.

Data Controller

• Operator: nando.llc
• Representative: Naoaki Nabeya
• Contact: info@nando.llc
• Location: Japan (please contact us by email for further details)

Information We Collect

1. Information collected automatically

• Access logs (collected by our host, Vercel): IP address, User-Agent, referrer, and request timestamp. These are retained for up to 30 days for Vercel's security and traffic-analysis purposes.
• Page-view metrics (Vercel Analytics): how many times each page is viewed and from which country, aggregated anonymously. No cookies are used (cookieless approach). No personally identifying information is included.
• Web Vitals (Vercel Speed Insights): anonymous performance metrics such as page load times. No cookies are used.

2. Information stored in cookies (all strictly necessary)

3. Advertising cookies (Google AdSense)

This site uses Google AdSense, a third-party advertising service (including during review/preparation periods).

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
• Google's use of advertising cookies (such as the DoubleClick cookie) enables it and its partners to serve personalised ads based on your interests.
• You may opt out of personalised advertising at any time via Google Ads Settings, or opt out of many third-party vendors' cookies at www.aboutads.info.
• See Google's Policies & Terms (Advertising) for details.

The cookies in section 2 above are strictly necessary for the operation of the service.

4. Information you choose to submit

• Photos of rate boards (submitted via /submit): the photo, a store ID, and an optional free-form memo.
• These are stored in Supabase Storage (a public bucket) and then processed by OCR and imported into the rate database, or rejected if OCR is not possible.
• We do not collect any personal information about the submitter (such as name, email, or persistent IP records).

What We Do Not Collect

• Personal information such as name, address, or phone number
• Financial information such as credit card or bank account details
• Persistent location data (when the map uses your current location, it is held only in memory during the browser session and is never sent to our servers)
• Biometric or sensitive data (race, religion, health, etc.)

Third-Party Services

To retrieve rate data and to deliver pages quickly, we use the following services:

• Vercel (hosting and analytics) — Privacy Policy

• Supabase (database and storage, Singapore / US regions) — Privacy Policy

• OpenStreetMap (map tiles) — Privacy Policy

• open.er-api.com (mid-market rate API)

• Google AdSense (advertising) — Privacy Policy

Vercel / Supabase / OpenStreetMap / open.er-api.com process access logs only within the scope of their own terms of service, and never for advertising or personal identification. For Google AdSense's use of cookies, see section 3 above.

International Data Transfers

• Data is stored on Vercel (US, EU, and Tokyo regions) and Supabase (Singapore / US regions).
• Transfers from the EU outside Japan are carried out under each provider's Data Processing Addendum (DPA), based on Standard Contractual Clauses (SCCs) or equivalent safeguards.

Your Rights (GDPR / Japan's Act on the Protection of Personal Information (APPI))

Residents of the EU and users in Japan are entitled to the following rights:

• Right to access: the right to request disclosure of the data we hold about you
• Right to rectification: the right to have inaccurate data corrected
• Right to erasure (right to be forgotten): the right to request deletion of your data
• Right to restriction of processing: the right to limit how your data is used
• Right to data portability: the right to receive your data in a machine-readable format
• Right to object: the right to object to the processing of your data
• Right to withdraw consent: the right to withdraw consent previously given for processing

To exercise these rights, please contact us at info@nando.llc. We will respond within 30 days as a rule.

Managing Cookies

• Refusing or deleting cookies: you can do so at any time from your browser settings.
• However, disabling locale or yenfinder_submitter will prevent the language switcher and submission-editing features from working.
• You can opt out of personalised advertising via Google Ads Settings or www.aboutads.info.

Data Retention Periods

• Access logs: 30 days
• Submitted rate photos: indefinite (deleted individually upon request)
• Rate data: indefinite (used for time-series analysis)
• Cookies: as shown in the table above

Users Under 18

This service is intended for inbound tourists to Japan in general. Users under 18 should use the service only with parental consent. We do not knowingly collect data from minors.

Disclosure to Law Enforcement

When required by a lawful, legitimate request, we may disclose data to the extent necessary.

Changes to This Policy

• This policy may be updated as necessary.
• Where there are material changes, we will announce them on the service.

Contact

• Email: info@nando.llc

Last updated: 2026-07-13